|
With special guest presenter Mike Spinney
As more states adopt privacy laws to protect their residents' personal information, the scope of these laws is evolving in significant ways. No longer just data breach notification requirements, today's laws mandate that companies take preventative measures to secure sensitive data. On March 1, 2010, MA 201 CMR 17 was the first in the nation to require specific technologies for the protection of personal information.
Join Mike Spinney, Senior Privacy Analyst at the Ponemon Institute and Michael Leland, CTO of NitroSecurity, to learn about how Massachusetts and others states are driving this evolution, the technology requirements for compliance, and how to prepare your organization for success.
Presenters:
Mike Spinney, Senior Privacy Analyst, Ponemon Institute
Michael Leland, CTO, NitroSecurity
- Download the Slides (4.1MB) -
- Replay the Webcast -
|
|
 Patient privacy and information security can be separate, siloed responsibilities within healthcare providers, with distinct teams focused on their respective missions, challenges and tools. Privacy incidents, like electronic medical record snooping, clinical system compromise, and identity theft, can be early indicators of more pervasive behavior. This can impact compliance or worse, be the first clues of undiscovered cyber-attacks that can threaten all clinical, operational and administrative systems. Integrating privacy solutions and security information management systems (SIEM) can provide the real-time visibility and analysis needed by both privacy officers and security analysts to create a common platform for delivering more comprehensive early warning systems. Join Mel Shakir, CTO of NitroSecurity, and Kurt Long, CEO and Founder of FairWarning to understand system architectures and implementation approaches available today to reduce risk through effective privacy and SIEM integration.
Presenter:
Mel Shakir, CTO of NitroSecurity
- Download the Slides (10.5MB) -
- Replay the Webcast -
|
|
Advanced Persistent Threats (APT) are goal oriented attacks carried out against a defined target in a very structured manner without the restrictions of time. The underlying goal for an APT attacker is to go undetected for as long as possible, while stealing as much information as possible. APT attackers are typically highly sophisticated and organized groups that have traditionally focused on defense, research and financial organizations - and are looking for new targets. In many cases APT attacks are the exact same attacks used by opportunistic attackers and malicious application developers. The key differentiator is the persistence of an APT attacker. The goal for this presentation is to define what APTs are and explore methodologies that can aid in identifying, tracking, and differentiating APT style attacks.
Presenter:
Jeremy Conway, Product Manager, NitroSecurity
- Replay the Webcast -
|
|
 The original Security Event Managers (SEM) started by supported IDS logs. Bringing in other third party logs grew the SEM into a Security Information Management (SIM), which then evolved further to incorporate contextual information from other sources such as VA and IAM tools, finally becoming what we refer to today as a "Security Information and Event Management" system, or SIEM. Each evolution increased the event load placed on the system, in how fast events or logs needed to be collected, how much storage was required to support data retention over time, and how quickly the data could be analyzed and accessed, in order to produce actionable information.
With SIEM evolving once more -- this time to become aware of application and protocol content -- the strain of information management is being seen again. Learn how to gain new visibility into whats happening on your network, by collecting and correlating diverse event data, logs and now content information, and the benefits you'll receive from implementing a true Content Aware SIEM.
Presenters:
Dr. Anton Chuvakin, Founder and Principal of Security Warrior
Eric Knapp, VP Technology Marketing, NitroSecurity
- Replay the Webcast -
|
|
 Driven by regulatory compliance and security event correlation, most large organizations have deployed a Security Information and Event Management (SIEM) system over the past few years. Does this mean that they are adequately protected? ESG does not believe so. Ominous security threats and a rash of publicly-disclosed data breaches certainly place an intense strain on many legacy security management tools and ESG believes this is just the tip of the iceberg.
Presenters:
Jon Oltsik, Principle Analyst, ESG
Michael Leland, CTO, NitroSecurity
- Replay the Webcast -
|
|
IT Security: The Next Decade
 InformationWeek's Dark Reading and Black Hat come together for their first-ever virtual event, exploring the most dangerous threats of the next ten years - and what you can do today to protect your enterprise from them.
As we come to the end of the first decade in the new millennium, the IT industry faces some of the greatest security challenges in its history. In fact, 2009 saw more breaches, more malware, and more zero-day exploits than any year before.
At that rate, what will security be like ten years from now? What threats and challenges will the new decade bring?
If questions like this make you feel like your head is about to explode, don't worry - there is a way to get some perspective on the future - by attending "IT Security: The Next Decade," a first-ever virtual event that combines the in-depth expertise of three of the industry's best-known security resources: Black Hat, InformationWeek, and Dark Reading
|
|
The original Security Event Managers (SEM) started by supported IDS logs. Bringing in other third party logs grew the SEM into a Security Information Management (SIM), which then evolved further to incorporate contextual information from other sources such as VA and IAM tools, finally becoming what we refer to today as a "Security Information and Event Management" system, or SIEM. Each evolution increased the event load placed on the system, in how fast events or logs needed to be collected, how much storage was required to support data retention over time, and how quickly the data could be analyzed and accessed, in order to produce actionable information.
With SIEM evolving once more -- this time to become aware of application and protocol content -- the strain of information management is being seen again. Learn how to gain new visibility into whats happening on your network, by collecting and correlating diverse event data, logs and now content information, and the benefits you'll receive from implementing a true Content Aware SIEM.
Presenters:
Dr. Anton Chuvakin, Founder and Principal of Security Warrior
Eric Knapp, VP Technology Marketing, NitroSecurity
- Replay the Webcast -
|
|
Adding SIEM to meet compliance requirements and increase security is a smart move. But with budgets tight how do you determine the right solution for your organization? Learn the latest trends in SIEM technology and understand the key capabilities that matter most to your organization. So you can avoid fines, minimize the impact of threats and vulnerabilities and put time back in your day.
Presenters:
Jerry Skurla, EVP Marketing, NitroSecurity
Eric Knapp, VP Technology Marketing, NitroSecurity
- Download the Slides (4.6MB) -
- Replay the Webcast -
|
|
 A roundtable discussion on HIPAA Security between panelists:
Michael Leland, NitroSecurity
Mark Seward, LogLogic
Reed Henry, ArcSight
Moderator: Rich Mogull, Securosis
- Replay the Webcast -
|
|
Power utilities present a unique security challenge. As we begin to converge what were historically three separate networks—one for communication, one for data monitoring (SCADA), and one for process control (PCS)—we increase efficiency ... but at the cost of security? Learn how to overcome the inherent difficulties in securing the modern digital utility infrastructure through central monitoring and correlation of all three networks.
Presenters:
Matthew E. Luallen, Certified SANS and Cisco Instructor, Co-Founder, Encari
Eric D. Knapp, VP Technology Marketing, NitroSecurity
- Replay the Webcast -
|
|
A roundtable discussion between panelists: Michael Leland of NitroSecurity; Reed Henry, ArcSight; Don MacLennan, RSA; Mark Seward, LogLogic; and Tracy Hulver, netForensics.
|
|
Matthew E. Luallen consults with both governmental and commercial sectors, including a multi-client base of public utilities and other power market organizations, national laboratories, financial institutions, and law enforcement. He has written, consulted and trained extensively on process control and SCADA security issues. He worked with utilities and regional reliability organizations on compliance with first the NERC 1200 standard, and in recent years with NERC CIP. For NERC CIP, he has performed gap analyses and developed and implemented remediation strategies across all of the standards and a wide variety of Critical Cyber Assets.
|
|
Our recent webinar on Zero-Day Correlation was so popular, and there were so many questions, that we're performing a follow up event that will focus solely on using NitroView to detect threats, build correlation rules, and provide notifications when threats occur ... or when suspicious behavior occurs that might indicate a new threat is in process.
|
|
How real-time analysis and anomaly detection tools are used by security professionals to discover new threats as they are occurring, create appropriate taxonomies based on these new threats, and then recursively check historical events to see if the network was put at risk in the days before the threat was known.
|
|
Speed, capacity, accuracy and other benchmarks are common for encryption, packet inspection, assessment, alerting and other security tools. This Webcast discusses how to similarly apply benchmarks to Security Information Event Management (SIEM) systems and introduces the release of our SANS Analysts Program white paper, "Benchmarking SIEM.".
|
Log in
